Technical Tip: How to move policy package with policy block to new FortiManager

1. Review the policy package on existing FortiManager, it may look similar to the following example, containing a policy block with 1 policy:

2. Run the following command:

execute fmpolicy print-adom-policyblock ?

After, follow the options to select the corresponding ADOM, policy block, and all relevant policy types. Additionally, print the general settings.

3. Optionally, use the following command to print the content of the policy package that contains the policy block:

execute fmpolicy print-adom-package ?

Note that the policy block is referenced using the ID of the object.

4. On the destination FortiManager, create an empty policy block.
   
   
5. Under Device Manager-Scripts, create a new Script, select Run Script On Policy Package or ADOM database. Paste the contents of the policy block print from the source FortiManager as script content.

6. Run the script on the target policy block. If the steps were followed correctly, the script will execute, and the contents of the policy block will be the same on both FortiManager devices.
   
   
7. To assign the policy block to corresponding packages, this can be done manually from the GUI, or if step 3 was followed, a script can be prepared and executed against the policy package referencing the policy block:

Note: Because the policy block is referenced in the policy package by ID only, it is necessary to reference the policy block ID on the destination FortiManager. In this example, the old ID was 6066, and the new ID is 6061.
A list of policy block IDs can be obtained by using the following command:

execute fmpolicy print-adom-policyblock ?

8. After executing the second script against the policy package, verify that the content of the policy package on the source and destination FortiManager is identical.